52 results about "Authorization" patented technology

In one embodiment, a first information packet is received at a payment network from a merchant, which includes a financial transaction cost and a private label card account identifier presented by the customer as a payment for the financial transaction. The private label card is a form of payment accepted only by the merchant or a merchant consortium that includes the merchant. The payment network uses the private label card account identifier to determine a financial account maintained by the customer at a financial institution and authorization information that allows debit access to the identified financial account. The payment network generates a second information packet comprising the transaction information, the account information, and the authorization information. The second information is transmitted from the payment network to the financial institution with a request to perform a debit transaction from the identified financial account for the cost of the financial transaction.

A system and method for enhanced patient programming security for remote programming via paired communication/implantable medical device access via custom hardware. The system comprises an implantable medical device capable of telemetric communication with an external device. The implantable medical device may be paired to a remote monitoring device. The implantable medical device and/or the remote monitoring device challenge other devices to provide information for authentication and/or authorization. The information may be information about the implantable medical device, information about the remote monitoring device, information about the patient, or heuristic information. The information may be stored in an electronic medical records system.

The invention discloses a cloud data security sharing method based on a block chain. The method comprises the steps that 1, a trusted certificate authorization center provides a unique global identityID and a digital certificate according to identity information submitted by a user or an attribute authorization center; the attribute authorization center assigns attribute public and private key pairs for each attribute and distributes attributes for legal users; 2, encrypting and uploading the user data; 3, downloading data by the user; and 4, data decryption: the attribute key set of the usermeets the access strategy of the data, and a decryption key can be obtained through an attribute-based decryption algorithm, so that the data to be accessed can be decrypted. The method has the advantages that the data sharing safety and the data sharing efficiency are improved in an untrusted environment, and the compliance of entity behaviors is supervised.

The invention relates to a method, which comprising initiating the establishment of a security association between a client node and a gateway node. User data is obtained from an authentication server and the user is au-thenticated. Authorization is obtained for the user for certain network services from a separate authorization node. An authorized address is provided to the client node. The authorization is checked by the gateway node for the allowing outbound packets to specific destinations.

The invention relates to a data anti-leakage protection method for a cloud storage environment. The method comprises the following steps of setting system symbols and parameters; performing system initialization; sending a user attribute list L to an authorization mechanism TA and requesting generation of an attribute secret key by a user; after the authorization mechanism TA receives the user attribute list L, generating a private key SKL of the user; performing data encryption; performing keyword encryption; generating a trap door; performing server search; and performing data decryption. Compared with the prior art, the method can directly search encrypted information stored in a cloud storage server effectively in a non-trusted environment, ensures safety of data and privacy of the user, and can support search access control of different user fine grits. The method provides reliable guaranteed for data safety in the cloud storage environment and has a good application prospect.

The invention relates to the technical field of distribution network models, and provides a method and a system for establishing a distribution network model. The method comprises the following steps: acquiring preset maintenance authorizations of the distribution network model; establishing a primary equipment model and a secondary equipment model in a range specified by the maintenance authorizations, and drawing a figure, wherein the secondary equipment model and the figure are respectively associated with the primary equipment model; according to the primary equipment model, the secondary equipment model and the figure which are associated, generating a network topology model; and informing other model maintenance modules to update network topology models respectively maintained by themselves according to the generated network topology model by using online modeling information. According to the invention, through acquiring the preset maintenance authorizations of the distribution network model, the correctness of a multi-people maintenance model can be ensured, thereby facilitating maintenance; and other model maintenance modules are informed to update network topology models respectively maintained by themselves according to the generated network topology model by using online modeling information, so that a power grid model is always consistent with an actual power-grid running model.

The invention discloses a house-renting management system capable of opening locks based on Bluetooth or two-dimensional codes and a method thereof and belongs to an intelligent house management system. The house-renting management system comprises a network server, an intelligent terminal and an intelligent lock body, wherein a database is arranged in the network server; the database at least comprises a lock body ID list, a user ID list and authorization relations between all lock body IDs and user IDs; the intelligent terminal is accessed to the network server via network; a lock cylinder main controller is arranged in the intelligent lock body and is accessed to a receiving device and a lock cylinder mechanical structure; landlords can remotely authorize the lock body IDs in the database of the network server through the intelligent terminal; tenants obtain dynamic unlocking keys through the intelligent terminal and can open the lock bodies through the dynamic unlocking keys. Through the house-renting management system capable of opening locks based on the Bluetooth or the two-dimensional codes and the method thereof, the operation is simple and convenient; the problem that the conventional keys are easily lost can be solved; meanwhile, the locks are opened by using the dynamic unlocking keys, so that the problem that the locks are changed when the tenants are changed can be solved; the house renting cost is effectively reduced; the conflicts between the landlords and the tenants can be reduced; and the rights of the landlords can be effectively guaranteed.

A wireless meshed network access authentication method belongs to the computer network field. When the system is initializing, offline CA gives a public-private key pair respectively to the system and itself; user provides user basic information to the offline CA to register for obtaining a public-private key pair and a public key certificate before accessing the network; if user want to serve as a backbone or an area router, it further need to provide an application; the offline CA selects users with better performances to serve as backbone and area router; the backbone router manages the system public-private key pair according to (n, t) threshold system, and gives authorization certificates and identity-based private keys to users. if a user want to enter some area, it provides the authorization certificate to the area router of the area, verifying with the area router to each other by the authorization certificates, and negotiating the authorization secret key of itself using three-sides agreement algorithm in order to access the area network. The method can effectively prevent unauthorized user from entering into network, and enable the authorized user to be quickly authenticated to acquire the resource service in network.

The invention relates to an access control method of a system participant. The method sets representation values of the following data tables in a storage device through a server: table one is used for corresponding the relationship between the system participant and information of a login account; table two is used for corresponding the relationship between the information of the login account and a position; table three is used for corresponding the relationship between the position and the type of the position; table four is used for corresponding the relationship of the type of the position and access; the server inquiries the data tables in the storage device through the login account, obtains the value of the type of the position of the system participant and obtains the corresponding access value according to the value of the type of the position; and the access content which is corresponding to the access value is displayed on a system interface. Compared with the prior art, the access control method is characterized by wide applicability, the personnel change is neglected through the position authorization, the access is given to the position, once the personnel is changed, the personnel is set for the certain position, and then the personnel can automatically inherit the complete access of the position.

The invention discloses an internet based water dispenser management method which is applied to a water dispenser. The internet based water dispenser includes: sending a request authorization water taking information to a server according to a received water taking command; controlling a water discharging valve to be opened to discharge water when a request authorization water taking result fed back by the server is successful authorization; monitoring the water discharging amount in real time, closing the water discharging valve while the water discharging amount is greater than the available water intake amount, or closing the water discharging valve while a water discharging closure command is received. The invention also discloses an internet based water dispenser management device. The internet based water dispenser management method and device can perform flexible billing according to the water use amount, and can decrease the cost of the water dispenser for users.

The invention discloses a charging service intelligent implementation method and device on the basis of a terminal. The method comprises the steps that a user identity on the terminal is verified, and a corresponding service process is started according to the user identity, wherein the service process comprises the substep that a charging service point is selected and recommended in a database according to geographical position information of the server; charging service reservation is conducted according to the charging service point selected by the user, and if reservation is conducted successfully, a service relationship of the terminal and the charging service point is established; authorization is opened through the service relationship, and the terminal is charged at the charging service point. The charging service intelligent implementation mode achieving the position location, user priority and two way communication functions is provided. The device comprises a user information verification unit, a charging service point selection unit, a service relationship unit and the charging service point. The device provides location and query services through mobile electrical equipment and the charging service point, and effective management is achieved.

The invention discloses a method and a system for third party application interface authorization. The method includes that a third party generates a third-party ciphertext according to distributed authentication information, generates a user identity ciphertext according to user information input by a user, initiates an interface request to an open platform and transmits the third-party ciphertext and the user identity ciphertext, and the open platform verifies the third-party ciphertext and the user identity ciphertext and authorizes an interface to the third party when the verification result is verified to pass. By the method and the system for third party application interface authorization, multi-verification can be realized, and network safety is further improved.

Embodiments of the present application relate to the field of wireless communications, and in particular, to a method and an apparatus for cell search in a sensor system, used for solving the problem in the prior art that an operation time delay is long in cell selection and cell residence. The method of the embodiments of the present application comprises: a terminal determining different types of frequency points in frequency points supported by the sensor system, the frequency points of the sensor system being divided, in a diminishing sequence of priorities, into a first type of authorization frequency point, a first type of non-authorization frequency point, a second type of authorization frequency point and a second type of non-authorization frequency point; and performing, in a diminishing sequence of priorities, cell search and cell residence on the frequency points supported by the sensor system. With the present application, a suitable cell can be selected fast and accurately to perform residence, thereby reducing the operation time delay in cell selection and cell residence after a terminal is started, and improving user experience.

A computer implemented method, apparatus, and computer program product for access control in a mixed discretionary access control and role based access control environment. In one embodiment, an execution access for a command is determined using a set of role based authorizations for a user invoking the command. In response to a determination that the user invoking the command is authorized based on the set of role based authorizations, a privilege in a set of privileges associated with the command is raised. Raising the privilege in the set of privileges bypasses discretionary access control checks. In response to a determination that the user invoking the command is unauthorized based on the set of role based authorizations, an execution access for the command is determined using a set of discretionary access mode bits associated with the command.

A method for providing assistance to a distressed vehicle having a damaged wheel component includes establishing geographically diverse assistance point facilities and wheel component warehouse facilities, receiving an assistance request regarding the vehicle, identifying an assistance point facility in the vehicle's vicinity, transmitting information and authorization to the assistance point facility, directing the repaired vehicle to visit a dealer, providing dealer authorization to replace the loaner wheel component with a new wheel component, and directing shipment of the loaner wheel component to an assistance point facility. Each facility maintains an inventory of loaner wheel components. Assistance requests include information on vehicle location, vehicle damage, and wheel component requirements. Transmitted information reveals the vehicle location and enables identification of the loaner wheel component corresponding to the vehicle's wheel component requirements. Transmitted authorizations authorize service calls to repair the vehicle by replacing the damaged wheel component with the loaner wheel component.

The invention provides a digital identity authentication method based on a secure two-dimensional code, comprising that: the third party application initiates an authorization login request; the identity authentication SDK obtains a session key from the server; the identity authentication SDK encrypts the information of the third party application through the session key, and sends the encrypted information and the authorized login request to the server; the server decrypts through the session key to obtain the information of the third-party application, generates a two-dimensional code and atwo-dimensional code url, and encrypts the two-dimensional code url by using a key, and the identity authentication SDK obtains the encrypted two-dimensional code url; the identity authentication SDKdecrypts the encrypted two-dimensional code url, then the third-party application jumps according to the two-dimensional code url to display the two-dimensional code; and the user scans the two-dimensional code for authentication to authorize the third-party application to log in. The invention also provides a digital identity authentication system based on the secure two-dimensional code to ensure the security of the authorization process and the secure login of the third-party application.

The invention discloses a data processing method and device, a storage medium and a processor. The method comprises the following steps of combining the storage information and the authorization information of a target file, and encrypting the combined information by adopting a first public key of an authorized object to obtain a target data packet; and under the condition that the authorized object requests to access the target file, decrypting the target data packet by adopting a private key corresponding to the first public key of the authorized object, and obtaining the target file from the block chain system based on the decrypted data. Through the application, the problem that the central server is easily attacked when the file is stored on the central server and the access to the file is authorized in the related technology, so that the file is difficult to safely and accurately access, is solved.

The invention discloses a method for accessing and exiting frequency spectrum of a hybrid cognitive network by adopting the conventional wireless communication technology. Wireless communication adopts a multi-band mode and comprises an authorization network and a cognitive network; a special node is included in a cognitive user; centralized frequency spectrum perception and channel allocation and management are performed by using a public control channel and the special node when the cognitive user is accessed; and the method for exiting of the cognitive user adopts a distributed mode after a channel is re-occupied by the authorization network. By adopting centralized access allocation, distributed perception exiting, and a point-to-point communication method, and the functions of accessing and exiting are separated to ensure the cognitive working efficiency and the complexity of a cognitive network system. Moreover, each node shares same hardware resources, so the special node can be arbitrarily selected or replaced, and the comprehensive reliability of the system can be also improved.

The invention provides a circusee synchronization method and system realized on a webpage as well as a client. The method comprises the following steps that: a user logs in a circusee region on the webpage and edits circusee subassemblies in the circusee region according to an authorization corresponding to the operation type of the user; an updating message of the circusee subassemblies in the circusee region is synchronously transmitted to the client of the other circusee users by the server; and the circusee subassemblies in the updated circusee region are synchronously displayed by the client.

The invention belongs to the technical field of computer applications, and discloses a third-party application authorization and authentication method based on multi-domain collaborative architecture. Multi-domain collaborative layered architecture is adopted, and consists of a plurality of layers of domains; each domain consists of an Internet of things platform, sensor equipment and a third-party application; permission management and partition are performed on each domain in a layered way; each target domain administrator audits authorization information; after pass of auditing, a plurality of domains through which auditing information passes can be taken as a resource group; and a developer finishes developing work according to an authorization result. Through adoption of the third-party application authorization and authentication method for use among a plurality of domains of the layered architecture, safe and reliable authorization access between a platform and a third-party application is ensured, and a rapid and convenient channel is provided for data interaction between the platform and the third-party application. Compared with a conventional third-party application permission authentication method, the method has the advantage that the authentication problem between a platform permission administrator, a third-party application developer and a platform user in the multi-domain collaborative architecture is solved.

The present invention provides a method for resource and admission control. In the process of resource requesting: upon receiving a resource initialization request, which is used for requesting a QoS resource for a service, sent by an SCF, a PD-FE of a visited network performing an authorization check and a resource availability check for the resource initialization request, and sending the resource initialization request to a PD-FE of a home network; the PD-FE of the home network performing an authorization check and making an initial policy decision for the resource initialization request, and sending a resource initialization response containing the generated initial policy decision to the PD-FE of the visited network; and the PD-FE of the visited network making a final admission decision for the resource initialization request according to the initial decision policy and the result of the resource availability check. The method provided by the present invention specifies respective functional attributes of the PACF in the home network and of the PACF in the visited network and the interaction process between the two, and solves the problem of resource and admission control supporting roaming.

Authentication problems often occur when a user of a terminal visits a communications network while roaming. A method is therefore provided for authorizing an authenticated user of a communications terminal. The terminal is configured to connect to a packet-switching network via an access gateway over a current network to which the terminal is connected. The method is implemented by a current authentication server over the current network and includes: receipt of a user authorization request from the access gateway, including an identifier of the user; transmission of a user authorization response to the access gateway, including parameters for authorizing the user, and a unique identifier of an authentication server that authenticated the user.

The invention provides a method for reporting terminal information in a cluster system. The method comprises the following steps: after group calling is established, each non-speaking-right terminal initiates a random access request, and a base station establishes cluster access layer connection with the terminals; when cluster operation is required, the terminals actively trigger base station authorization, and transmit information to be reported to a network side. The invention further provides a base station, a terminal and a system corresponding to the method. According to the technical scheme of the invention, null resources can be saved, and the terminal information reporting speed is increased.

The invention discloses an intelligent lock system and a control method thereof. The intelligent lock system comprises a remote server, a master controller, a plurality of intelligent lock nodes and amobile terminal. A mobile phone APP client side in communication connection with a remote server is arranged in the mobile terminal; the remote server is in communication connection with the master controller; the master controller is in communication connection with the intelligent lock nodes; and each intelligent lock node comprises a photovoltaic cell panel, a rechargeable battery, an externalpower supply, a photovoltaic energy collecting circuit, a lock drive power circuit, an inner core power circuit, a ZigBee communication module, a lock control drive circuit, a lock state input circuit, a central processing unit (CPU) and a lock body. According to the intelligent lock system and the control method thereof provided by the invention, the photovoltaic cell panels and the external power supplies can be adopted for supplying power to the rechargeable batteries, so that the energy is saved, an open-and-close state of the lock body can be detected in real time, and open-and-close information of the lock body can be recorded by the system; and the remote server of the intelligent lock system is logged in through the third-party application authorization, so that the defects of complex operation and inconvenience in application of an existing device or product are overcome.

The invention discloses a system and a method for processing multi-transponder programs by an integrated conditional access module; the system comprises a tuner, an FPGA, a controller, an intelligent card and a modulator; wherein the output end of the tuner is connected with the input end of the FPGA, the FPGA is connected with the controller, the controller is connected with the intelligent card, and the output end of the FPGA is connected with the modulator; the controller is used for analyzing program identifier values of the authorization control information and the authorization management information, sending effective data to the intelligent card to complete authorization and obtain control words, and sending the control words of programs to the FPGA in real time, and the FPGA is used for descrambling video and audio data; an integrated CAM board card is used, four repeaters and three intelligent cards are additionally arranged, decryption and descrambling of 56 sets of encrypted programs on the four repeaters can be completed at the same time, the processing capacity of the digital forwarding all-in-one machine is improved, and the size occupied by the decryption part of the all-in-one machine is greatly reduced.